You're right, fixed that headline now.

~~I've run~~ I run the IoT version of 10 on everything - laptop, desktop, VM's, etc, it's great because it only does updates 2x/year, no feature updates by default.

Licensing is handled by the scripts from Microsoft. If you're a large enough business, it would be worth the cost of the Enterprise licensing just in reduced support issues.

Basically, it's Windows without the bloat, which seems like a good thing. I can use whatever apps I want for photo viewer, etc, and no garbage on the system.

(...) is a requirement for windows 11 consumer devices. :)

If you don't have TPM how can they do browser attestation and ensure you have no ad blocking software?

This is for IoT.

It's been quite a while, but on an older system years ago I recall it slightly nagging me about how the computer wasn't W11-enabled.

I've been curious about people who have been disabling the TPM. Where are you storing your disk encryption keys?

I found it was pretty easy to get rid of the nag. I installed a different OS. For my development stuff that needs windows and I can't run with wine (very few tools) - I have a VM running a windows version with 0 Internet access. Fuck that company sideways.

Didn’t help that beta tests didn’t require it either

What about home users?

I run Win10 LTSC as default for desktops, VM's, laptops. It's great - 2x/year security updates, nothing else.

No bloat, no BS.

Good for the people sailing the seas too. Yarrr!

I'm sure this is a meme, but the trust is proving the OS is not tampered with.
Like, if malware was able to inject a malicious windows update URL into the OS, and inject a malicious certificate that gets the OS to trust the malicious updates by the malicious URL.
The signature of the OS would then differ from what the TPM/CPU recorded during OS boot and what the TPM/CPU has hashed during running. This would indicate that the OS has been tampered with.
So the trust in TPM is that the TPM and CPU are working together correctly (which is certified during manufacturing), so that the TPM can then attest that the OS (or software or whatever) hasn't been tampered with.

So yeh, it's MS (or whatever software company) trusting that the software it is interacting with is running as it is intended

Honestly, the user is the biggest security risk in the first place. People run all kinds of malware and put their passwords into phishing sites all the time. One thing a TPM is used for is secure boot, which prevents malware from inserting its own bootloader to take over the OS.

But who is supposed to trust whom?

12 years old and still relevant:
https://www.youtube.com/watch?v=s7WDbnHlc1E

Reminds me of the clipper chip

There’s a registry key (sorry I’m on mobile right now) that you can actually add during a clean setup of current non-LTSC versions that remove the requirement for vTPM and SecureBoot. That install should easily be able to be live migrated. We were doing that when first playing with Windows 11

Thank you

I tried to find a link a couple weeks ago and I came up short

They are lowering the specs for this one version that's only available to license to Enterprise users because it's meant for Enterprise level IoT use cases, not as a typical desktop.

They didn't though, unless you want to run the IoT (internet of things) version, which is for integrated devices. That's why storage size matters.

This isn't my largest complaint with W11, and I don't think it's many other's either. I don't run windows though, so I don't really care.

Your planning on running the IOT version on your computer?